Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Checkpoint
Checkpoint Other Certification
156-110
Check Point Certified Security Principles Associate (CCSPA) Questions and Answers

Pass the Checkpoint Other Certification 156-110 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam 156-110 Premium Access

View all detail and faqs for the 156-110 exam

Go to Exam

847 Students Passed

95% Average Score

98% Same Questions

Viewing page 3 out of 3 pages

Viewing questions 21-30 out of questions

Questions # 21:

_________________ is a type of cryptography, where letters of an original message are systematically rearranged into another sequence.

Options:

Symmetric-key exchange

Steganography

Transposition cipher

Asymmetric-key encryption

Simple substitution cipher

Answer

Questions # 22:

Why should user populations be segmented?

Options:

To allow resources to be shared among employees

To allow appropriate collaboration, and prevent inappropriate resource sharing

To prevent appropriate collaboration

To provide authentication services

To prevent the generation of audit trails from gateway devices

Answer

Questions # 23:

A _______ attack uses multiple systems to launch a coordinated attack.

Options:

Distributed denial-of-service

Teardrop

Birthday

FTP Bounce

Salami

Answer

Questions # 24:

If e-mail is subject to review by individuals other than the sender and recipient, what should be clearly stated in the organization's e-mail policy?

Options:

Technologies and methods used to monitor and enforce the organization's policies

Senior management and business-unit owner responsibilities and delegation options

Clear, legally defensible definition of what constitutes a business record

Consequences for violation of the organization's acceptable-use policy

No expectation of privacy for e-mail communications, using the organization's resources

Answer

Questions # 25:

____________________ are the people who consume, manipulate, and produce information assets.

Options:

Information asset owners

Business-unit owners

Audit-control groups

Information custodians

Functional users

Answer

Questions # 26:

Which of the following equations results in the Single Loss Expectancy for an asset?

Options:

Asset Value x % Of Loss From Realized Exposure

Asset Value x % Of Loss From Realized Threat

Annualized Rate of Occurrence / Annualized Loss Expectancy

Asset Value x % Of Loss From Realized Vulnerability

Annualized Rate of Occurrence x Annualized Loss Expectancy

Answer

Questions # 27:

Which type of access management allows subjects to control some access of objects for other subjects?

Options:

Discretionary

Hybrid

Mandatory

Role-based

Nondiscretionary

Answer

Questions # 28:

Distinguish between the role of the data owner and the role of the data custodian. Complete the following sentence. The data owner is the:

Options:

department in the organization responsible for the data's physical storage location. The data custodian is anyone who has access the data for any reason.

person or entity who accesses/and or manipulates data or information, in the course of assigned duties. The data custodian is a person or process with the appropriate level of privilege to access the data.

person or entity ultimately responsible for the security of an information asset. The data custodian is the person or entity responsible for imposing and enforcing policies and restrictions, dictated by the data owner.

person or process that originally creates the information. The data custodian is a role that shifts to any person or process currently accessing the data, and passes to the next person or process to access the data.

person or entity responsible for imposing and enforcing policies and restrictions, dictated by the functional user. The data custodian is a person or process who accesses and/or manipulates the information.

Answer

Questions # 29:

INFOSEC professionals are concerned about providing due care and due diligence. With whom should they consult, when protecting information assets?